Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-7758

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 (DNP3oE) if an older TCI/IP session is still open with identical IP address and port number.

Published

2018-04-18T20:29:00.623

Last Modified

2024-11-21T04:12:40.817

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

6.5

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-613
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric micom_p141_firmware - Yes
Hardware schneider-electric micom_p141 - No
Operating System schneider-electric micom_p142_firmware - Yes
Hardware schneider-electric micom_p142 - No
Operating System schneider-electric micom_p143_firmware - Yes
Hardware schneider-electric micom_p143 - No
Operating System schneider-electric micom_p145_firmware - Yes
Hardware schneider-electric micom_p145 - No
Operating System schneider-electric micom_p642_firmware - Yes
Hardware schneider-electric micom_p642 - No
Operating System schneider-electric micom_p643_firmware - Yes
Hardware schneider-electric micom_p643 - No
Operating System schneider-electric micom_p645_firmware - Yes
Hardware schneider-electric micom_p645 - No
Operating System schneider-electric micom_p849_firmware - Yes
Hardware schneider-electric micom_p849 - No
Operating System schneider-electric micom_p746_firmware - Yes
Hardware schneider-electric micom_p746 - No
Operating System schneider-electric micom_p841a_firmware - Yes
Hardware schneider-electric micom_p841a - No
Operating System schneider-electric micom_p841b_firmware - Yes
Hardware schneider-electric micom_p841b - No
Operating System schneider-electric micom_p443_firmware - Yes
Hardware schneider-electric micom_p443 - No
Operating System schneider-electric micom_p445_firmware - Yes
Hardware schneider-electric micom_p445 - No
Operating System schneider-electric micom_p446_firmware - Yes
Hardware schneider-electric micom_p446 - No
Operating System schneider-electric micom_p441_firmware - Yes
Hardware schneider-electric micom_p441 - No
Operating System schneider-electric micom_p442_firmware - Yes
Hardware schneider-electric micom_p442 - No
Operating System schneider-electric micom_p444_firmware - Yes
Hardware schneider-electric micom_p444 - No
Operating System schneider-electric micom_p541_firmware - Yes
Hardware schneider-electric micom_p541 - No
Operating System schneider-electric micom_p542_firmware - Yes
Hardware schneider-electric micom_p542 - No
Operating System schneider-electric micom_p543_firmware - Yes
Hardware schneider-electric micom_p543 - No
Operating System schneider-electric micom_p544_firmware - Yes
Hardware schneider-electric micom_p544 - No
Operating System schneider-electric micom_p545_firmware - Yes
Hardware schneider-electric micom_p545 - No
Operating System schneider-electric micom_p546_firmware - Yes
Hardware schneider-electric micom_p546 - No
References